The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Foresight_linux | Foresight_linux | 1.1 (including) | 1.1 (including) |
Red Hat Enterprise Linux 5 | RedHat | vim-2:7.0.109-3.el5.3 | * |
Vim | Ubuntu | edgy | * |
Vim | Ubuntu | feisty | * |